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WE CLAIM: 

1. An integrated circuit for selectively encrypting plaintext data received from a first device 
to produce encrypted data to send to a second device, the integrated circuit comprising: 
controllable encryption circuitry con:q)risittg: 
a data input; 
an enable input; 
a data output; 

a plaintext input for providing the plaintext data to the data input; 

an encrypted text output for providing the encrypted data from the data output; 

a first control input for receiving a first device authentication signal for 

authenticatmg the fiirst device; and 
a first verification circuit, responsive to the first device authentication signal, for 

producing a first verification signal for use in controlling the enable input of 

the encryption circuitry to enable the encryption circuitry to provide the 

encrypted data via the encrypted text output. 



2. The integrated circuit as recited in claim 1, fiirther comprising: 

a second control input for receiving a second device authentication signal 

authenticating the second device; 
a second verification circuit responsive to the second device authentication signal 

for producing a second verification signal; and 
a gating circuit responsive to the first and second verification signals for applying 

an enable signal to the enable input to cause the controllable encryption 

circuitry to provide the encrypted data via the encrypted text output. 

3. The integrated circuit as recited in claim 1, wherein: 

the first device authentication signal comprises a device identifier; and 
the first verification circuit verifies the first device by comparing the device 
identifier to a corresponding e?q)ected device identifier. 
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1 4. The integrated circuit as recited in claim 3, wherein the expected device identifier is 

2 hardwired into the integrated circuit. 

1 5. The mtegrated circuit as recited in claim 3, wherein: 

2 the second device is a non-volatile memory; and 

3 the expected device identifier is stored on the non-volatile memory. 

1 6. The integrated circuit as recited in claim 1, wherein: 

2 the first device authentication signal comprises a message authentication code 

3 generated over the plaintext data using a device key; and 

4 the first verification circuit verifies the first device by verifying the message 

5 authentication code using an internal key. 

J 1 7. The integrated circuit as recited in claim 1, wherein: 
""-^ 2 the first device is a signal processing circuit; and 

U 3 the second device is a non-volatile memory. 



nj 
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18. A method of controlling encryption circuitry within an integrated circuit by selectively 

2 encrypting plaintext data received from a first device to produce encrypted data to send to 

3 a second device, the method comprising the steps of: 

4 receiving the plaintext data from the first device; 

5 receiving a first device authentication signal for authenticating the first device; 

6 producing a first verification signal in response to the first device authentication 

7 signal; and 

8 enabling the encryption circuitry in response to the first verification signal to 

9 provide the encrypted data to the second device. 

1 9. The method of controlling encryption circuitry as recited in claim 8, fiirther corc^jrising the 

2 steps of: 

O 3 receiving a second device authentication signal authenticating the second device; 

7 4 producing a second verification signal in response to the second device 

j\ 5 authentication signal; and 

M= 6 enabling the encryption circuitry in response to the first and second verification 

CI 7 signals to provide the encrypted data to the second device. 

nj 1 10, The method of controlling encryption circuitry as recited in claim 8, wherein: 

2 the first device authentication signal com5)rises a device identifier; and 

3 the step of producmg a first verification signal in response to the first device 

" 4 authentication signal cott^rises the step of con]5)aring the device identifier 

5 to a corresponding e:q)ected device identifier. 

1 11. The method of controlling encryption circuitry as recited in claim 10, wherein the 

2 expected device identifier is hardwired into an integrated circuit. 

1 12. The method of controlling encryption circuitry as recited in claim 10, wherein: 

2 the second device is a non-volatile memory; and 

3 the expected device identifier is stored on the non-volatile memory. 
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1 13. The method of controlling encryption chcuitry as recited in claim 8, wherem: 

2 the first device authentication signal comprises a message authentication code 

3 generated over the plaintext data using a device key; and 

4 the step of producing a first verification signal in response to the first device 

5 authentication signal con5)rises the step of verifying the message 

6 authentication code using an intemal key. 

1 14. The method of controlling encryption circuitry as recited in claim 8, wherein: 

2 the first device is a signal processing circuit; and 

3 the second device is a non-volatile memory. 
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